roles: admin: can: manage: - all user: can: read: - Comment - Post - Article - User write: - Article manage: - Comment - Post role_groups: bloggers: can: read: - Article - Comment cannot: write: - Article - Post editors: can: read: - Article - Comment cannot: write: - Article - Post licenses: editors: can: manage: - all users: kris@gmail.com: can: cannot: